SUSE-SU-2024:0075-1: Security update for LibreOffice

Q: Which security issues are addressed by this update?

The update fixes CVE-2023-0950, a stack underflow in ScInterpreter, and CVE-2023-2255, which allowed remote documents to be loaded through an IFrame without a prompt.

Q: What LibreOffice version does the update provide?

It updates LibreOffice from version 7.3.6.2 to version 7.5.4.1.

Published Jan 10, 2024

Updated

This update for LibreOffice fixes the following issues: libreoffice: Version update from 7.3.6.2 to 7.5.4.1 (jsc#PED-3561, jsc#PED-3550, jsc#PED-1785): For the highlights of changes of version 7.5 please consult the official release notes: https://wiki.documentfoundation.org/ReleaseNotes/7.5 For the highlights of changes of version 7.4 please consult the official release notes: https://wiki.documentfoundation.org/ReleaseNotes/7.4 Security issues fixed: CVE-2023-0950: Fixed stack underflow in ScInterpreter (bsc#1209242) CVE-2023-2255: Fixed vulnerability where remote documents could be loaded without prompt via IFrame (bsc#1211746)

Bug fixes: Fix PPTX shadow effect for table offset (bsc#1204040) Fix ability to set the default tab size for each text object (bsc#1198666) Fix PPTX extra vertical space between different text formats (bsc#1200085) Do not use binutils-gold as the package is unmaintainedd and will be removed in the future (bsc#1210687)

Updated bundled dependencies: boost version update from 1770 to 1800 curl version update from 7.83.1 to 8.0.1 icu4c-data version update from 701 to 721 icu4c version update from 701 to 721 pdfium version update from 4699 to 5408 poppler version update from 21.11.0 to 22.12.0 poppler-data version update from 0.4.10 to 0.4.11 skia version from m97-a7230803d64ae9d44f4e128244480111a3ae967 to m103-b301ff025004c9cd82816c86c547588e6c24b466

New build dependencies: fixmath-devel libwebp-devel zlib-devel dragonbox-devel at-spi2-core-devel libtiff-devel dragonbox: New package at version 1.1.3 (jsc#PED-1785) New dependency for LibreOffice 7.4 fixmath: New package at version 2022.07.20 (jsc#PED-1785) New dependency for LibreOffice 7.4 libmwaw: Version update from 0.3.20 to 0.3.21 (jsc#PED-1785): Add debug code to read some private rsrc data Allow to read some MacWrite which does not have printer informations Add a parser for Scoop files Add a parser for ScriptWriter files Add a parser for ReadySetGo 1-4 files xmlsec1: Version update from 1.2.28 to 1.2.37 required by LibreOffice 7.5.2.2 (jsc#PED-3561, jsc#PED-3550): Retired the XMLSec mailing list "xmlsec@aleksey.com" and the XMLSec Online Signature Verifier. Migration to OpenSSL 3.0 API Note that OpenSSL engines are disabled by default when XMLSec library is compiled against OpenSSL 3.0. To re-enable OpenSSL engines, use --enable-openssl3-engines configure flag (there will be a lot of deprecation warnings). The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now deprecated and will be removed in the future versions of XMLSec Library. Refactored all the integer casts to ensure cast-safety. Fixed all warnings and enabled -Werror and -pedantic flags on CI builds. Added configure flag to use sizet for xmlSecSize (currently disabled by default for backward compatibility). Support for OpenSSL compiled with OPENSSLNOERR. Full support for LibreSSL 3.5.0 and above Several other small fixes Fix decrypting session key for two recipients Added --privkey-openssl-engine option to enhance openssl engine support Remove MD5 for NSS 3.59 and above Fix PKCS12parse return code handling Fix OpenSSL lookup xmlSecX509DataGetNodeContent(): don't return 0 for non-empty elements - fix for LibreOffice Unload error strings in OpenSSL shutdown. Make userData available when executing preExecCallback function Add an option to use secure memset. Enabled XMLPARSEHUGE for all xml parsers. Various build and tests fixes and improvements. Move remaining private header files away from xmlsec/include/ folder Other packaging changes: Relax the crypto policies for the test-suite. It allows the tests using certificates with small key lengths to pass. Pass --disable-md5 to configure: The cryptographic strength of the MD5 algorithm is sufficiently doubtful that its use is discouraged at this time. It is not listed as an algorithm in [XMLDSIG-CORE1] https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1

Affected Software

203 affected componentsFixes available

All of the following

SUSE SUSE OpenStack Cloud 9 (x86_64)

Any of the following

suse/libxmlsec1-gnutls1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-32bit-2.28.1-6.5.23

1_0-0-32bit-2.28.1-6.5.23

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gcrypt1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-2.28.1-6.5.23

1_0-0-debuginfo-2.28.1-6.5.23

suse/libatk<1_0-0-2.28.1-6.5.23

1_0-0-2.28.1-6.5.23

suse/libxmlsec1<1-1.2.37-8.6.21

1-1.2.37-8.6.21

suse/typelib<1_0-Atk-1_0-2.28.1-6.5.23

1_0-Atk-1_0-2.28.1-6.5.23

suse/libxmlsec1<1-debuginfo-1.2.37-8.6.21

1-debuginfo-1.2.37-8.6.21

suse/libxmlsec1-gcrypt1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gnutls1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-32bit-2.28.1-6.5.23

1_0-0-debuginfo-32bit-2.28.1-6.5.23

All of the following

SUSE SUSE OpenStack Cloud 9 (noarch)

Any of the following

suse/atk-lang<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-doc<2.28.1-6.5.23

2.28.1-6.5.23

All of the following

SUSE SUSE OpenStack Cloud Crowbar 9 (x86_64)

Any of the following

suse/libxmlsec1-gnutls1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-32bit-2.28.1-6.5.23

1_0-0-32bit-2.28.1-6.5.23

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gcrypt1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-2.28.1-6.5.23

1_0-0-debuginfo-2.28.1-6.5.23

suse/libatk<1_0-0-2.28.1-6.5.23

1_0-0-2.28.1-6.5.23

suse/libxmlsec1<1-1.2.37-8.6.21

1-1.2.37-8.6.21

suse/typelib<1_0-Atk-1_0-2.28.1-6.5.23

1_0-Atk-1_0-2.28.1-6.5.23

suse/libxmlsec1<1-debuginfo-1.2.37-8.6.21

1-debuginfo-1.2.37-8.6.21

suse/libxmlsec1-gcrypt1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gnutls1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-32bit-2.28.1-6.5.23

1_0-0-debuginfo-32bit-2.28.1-6.5.23

All of the following

SUSE SUSE OpenStack Cloud Crowbar 9 (noarch)

Any of the following

suse/atk-lang<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-doc<2.28.1-6.5.23

2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/xmlsec1-openssl-devel<1.2.37-8.6.21

1.2.37-8.6.21

suse/libmwaw-devel<0.3.21-7.24.14

0.3.21-7.24.14

suse/libmwaw<0_3-3-0.3.21-7.24.14

0_3-3-0.3.21-7.24.14

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-devel<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-gnutls-devel<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-gcrypt-devel<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-devel<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-nss-devel<1.2.37-8.6.21

1.2.37-8.6.21

suse/libmwaw-debugsource<0.3.21-7.24.14

0.3.21-7.24.14

All of the following

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5 (noarch)

suse/libmwaw-devel-doc<0.3.21-7.24.14

0.3.21-7.24.14

All of the following

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5 (x86_64)

Any of the following

suse/libreoffice-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-sdk<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-sdk-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-debugsource<7.5.4.1-48.44.2

7.5.4.1-48.44.2

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)

Any of the following

suse/libxmlsec1-gnutls1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gcrypt1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-2.28.1-6.5.23

1_0-0-debuginfo-2.28.1-6.5.23

suse/libatk<1_0-0-2.28.1-6.5.23

1_0-0-2.28.1-6.5.23

suse/libxmlsec1<1-1.2.37-8.6.21

1-1.2.37-8.6.21

suse/typelib<1_0-Atk-1_0-2.28.1-6.5.23

1_0-Atk-1_0-2.28.1-6.5.23

suse/libxmlsec1<1-debuginfo-1.2.37-8.6.21

1-debuginfo-1.2.37-8.6.21

suse/libxmlsec1-gcrypt1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gnutls1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1<1.2.37-8.6.21

1.2.37-8.6.21

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch)

Any of the following

suse/atk-lang<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-doc<2.28.1-6.5.23

2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)

Any of the following

suse/libatk<1_0-0-32bit-2.28.1-6.5.23

1_0-0-32bit-2.28.1-6.5.23

suse/libatk<1_0-0-debuginfo-32bit-2.28.1-6.5.23

1_0-0-debuginfo-32bit-2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/libxmlsec1-gnutls1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gcrypt1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-2.28.1-6.5.23

1_0-0-debuginfo-2.28.1-6.5.23

suse/libatk<1_0-0-2.28.1-6.5.23

1_0-0-2.28.1-6.5.23

suse/libxmlsec1<1-1.2.37-8.6.21

1-1.2.37-8.6.21

suse/typelib<1_0-Atk-1_0-2.28.1-6.5.23

1_0-Atk-1_0-2.28.1-6.5.23

suse/libxmlsec1<1-debuginfo-1.2.37-8.6.21

1-debuginfo-1.2.37-8.6.21

suse/libxmlsec1-gcrypt1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gnutls1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1<1.2.37-8.6.21

1.2.37-8.6.21

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (noarch)

Any of the following

suse/atk-lang<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-doc<2.28.1-6.5.23

2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (s390x x86_64)

Any of the following

suse/libatk<1_0-0-32bit-2.28.1-6.5.23

1_0-0-32bit-2.28.1-6.5.23

suse/libatk<1_0-0-debuginfo-32bit-2.28.1-6.5.23

1_0-0-debuginfo-32bit-2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)

Any of the following

suse/libxmlsec1-gnutls1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/atk-debugsource<2.28.1-6.5.23

2.28.1-6.5.23

suse/xmlsec1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gcrypt1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libatk<1_0-0-debuginfo-2.28.1-6.5.23

1_0-0-debuginfo-2.28.1-6.5.23

suse/libatk<1_0-0-2.28.1-6.5.23

1_0-0-2.28.1-6.5.23

suse/libxmlsec1<1-1.2.37-8.6.21

1-1.2.37-8.6.21

suse/typelib<1_0-Atk-1_0-2.28.1-6.5.23

1_0-Atk-1_0-2.28.1-6.5.23

suse/libxmlsec1<1-debuginfo-1.2.37-8.6.21

1-debuginfo-1.2.37-8.6.21

suse/libxmlsec1-gcrypt1<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debugsource<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-openssl1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/xmlsec1-debuginfo<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-gnutls1<1.2.37-8.6.21

1.2.37-8.6.21

suse/libxmlsec1-nss1<1.2.37-8.6.21

1.2.37-8.6.21

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch)

Any of the following

suse/atk-lang<2.28.1-6.5.23

2.28.1-6.5.23

suse/atk-doc<2.28.1-6.5.23

2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)

Any of the following

suse/libatk<1_0-0-32bit-2.28.1-6.5.23

1_0-0-32bit-2.28.1-6.5.23

suse/libatk<1_0-0-debuginfo-32bit-2.28.1-6.5.23

1_0-0-debuginfo-32bit-2.28.1-6.5.23

All of the following

SUSE SUSE Linux Enterprise Workstation Extension 12 12-SP5 (x86_64)

Any of the following

suse/libreoffice-librelogo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-writer-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-gtk3-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-impress-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-math-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-officebean<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-officebean-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/fixmath-devel<2022.07.20-8.3.48

2022.07.20-8.3.48

suse/libreoffice-impress<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libmwaw<0_3-3-debuginfo-0.3.21-7.24.14

0_3-3-debuginfo-0.3.21-7.24.14

suse/libreoffice-math<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-draw<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-pyuno-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/dragonbox-devel<1.1.3-8.3.48

1.1.3-8.3.48

suse/libreoffice-calc-extensions<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-draw-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-gnome-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-calc-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-calc<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libmwaw-debugsource<0.3.21-7.24.14

0.3.21-7.24.14

suse/libreoffice-gtk3<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-writer<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-base-drivers-postgresql<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-gnome<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-filters-optional<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-mailmerge<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-base-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-base<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-debugsource<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libmwaw<0_3-3-0.3.21-7.24.14

0_3-3-0.3.21-7.24.14

suse/libreoffice-writer-extensions<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-base-drivers-postgresql-debuginfo<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-pyuno<7.5.4.1-48.44.2

7.5.4.1-48.44.2

All of the following

SUSE SUSE Linux Enterprise Workstation Extension 12 12-SP5 (noarch)

Any of the following

suse/libreoffice-l10n-af<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-branding-upstream<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-lt<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-cs<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-hr<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-nn<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-de<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ru<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-fr<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-icon-themes<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-xh<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-es<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-hu<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ja<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-uk<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ko<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ca<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-pl<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-it<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-hi<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-fi<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-gu<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ro<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-sk<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-zu<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-ar<7.5.4.1-48.44.2

7.5.4.1-48.44.2

suse/libreoffice-l10n-sv<7.5.4.1-48.44.2

7.5.4.1-48.44.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/libxmlsec1-gnutls1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libatk to a version that resolves this vulnerability.
Fixed in 1_0-0-32bit-2.28.1-6.5.23
Upgrade
Upgrade suse/atk-debugsource to a version that resolves this vulnerability.
Fixed in 2.28.1-6.5.23
Upgrade
Upgrade suse/xmlsec1 to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-openssl1 to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-gcrypt1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-nss1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libatk to a version that resolves this vulnerability.
Fixed in 1_0-0-debuginfo-2.28.1-6.5.23
Upgrade
Upgrade suse/libatk to a version that resolves this vulnerability.
Fixed in 1_0-0-2.28.1-6.5.23
Upgrade
Upgrade suse/libxmlsec1 to a version that resolves this vulnerability.
Fixed in 1-1.2.37-8.6.21
Upgrade
Upgrade suse/typelib to a version that resolves this vulnerability.
Fixed in 1_0-Atk-1_0-2.28.1-6.5.23
Upgrade
Upgrade suse/libxmlsec1 to a version that resolves this vulnerability.
Fixed in 1-debuginfo-1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-gcrypt1 to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/xmlsec1-debugsource to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-openssl1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/xmlsec1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-gnutls1 to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libxmlsec1-nss1 to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libatk to a version that resolves this vulnerability.
Fixed in 1_0-0-debuginfo-32bit-2.28.1-6.5.23
Upgrade
Upgrade suse/atk-lang to a version that resolves this vulnerability.
Fixed in 2.28.1-6.5.23
Upgrade
Upgrade suse/atk-doc to a version that resolves this vulnerability.
Fixed in 2.28.1-6.5.23
Upgrade
Upgrade suse/xmlsec1-openssl-devel to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libmwaw-devel to a version that resolves this vulnerability.
Fixed in 0.3.21-7.24.14
Upgrade
Upgrade suse/libmwaw to a version that resolves this vulnerability.
Fixed in 0_3-3-0.3.21-7.24.14
Upgrade
Upgrade suse/atk-devel to a version that resolves this vulnerability.
Fixed in 2.28.1-6.5.23
Upgrade
Upgrade suse/xmlsec1-gnutls-devel to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/xmlsec1-gcrypt-devel to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/xmlsec1-devel to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/xmlsec1-nss-devel to a version that resolves this vulnerability.
Fixed in 1.2.37-8.6.21
Upgrade
Upgrade suse/libmwaw-debugsource to a version that resolves this vulnerability.
Fixed in 0.3.21-7.24.14
Upgrade
Upgrade suse/libmwaw-devel-doc to a version that resolves this vulnerability.
Fixed in 0.3.21-7.24.14
Upgrade
Upgrade suse/libreoffice-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-sdk to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-sdk-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-debugsource to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-librelogo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-writer-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-gtk3-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-impress-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-math-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-officebean to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-officebean-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/fixmath-devel to a version that resolves this vulnerability.
Fixed in 2022.07.20-8.3.48
Upgrade
Upgrade suse/libreoffice-impress to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libmwaw to a version that resolves this vulnerability.
Fixed in 0_3-3-debuginfo-0.3.21-7.24.14
Upgrade
Upgrade suse/libreoffice-math to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-draw to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-pyuno-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/dragonbox-devel to a version that resolves this vulnerability.
Fixed in 1.1.3-8.3.48
Upgrade
Upgrade suse/libreoffice-calc-extensions to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-draw-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-gnome-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-calc-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-calc to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-gtk3 to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-writer to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-base-drivers-postgresql to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-gnome to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-filters-optional to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-mailmerge to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-base-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-base to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-writer-extensions to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-base-drivers-postgresql-debuginfo to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-pyuno to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-af to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-branding-upstream to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-lt to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-cs to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-hr to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-nn to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-de to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ru to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-fr to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-icon-themes to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-xh to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-es to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-hu to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ja to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-uk to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-en to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ko to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ca to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-pl to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-it to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-bg to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-da to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-nl to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-hi to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-fi to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-gu to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ro to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-sk to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-zu to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-ar to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-sv to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade suse/libreoffice-l10n-nb to a version that resolves this vulnerability.
Fixed in 7.5.4.1-48.44.2
Upgrade
Upgrade libmwaw to a version that resolves this vulnerability.
Fixed in 0.3.21
Upgrade
Upgrade xmlsec1 to a version that resolves this vulnerability.
Fixed in 1.2.37
Upgrade
Upgrade libreoffice to a version that resolves this vulnerability.
Fixed in 7.5.4.1
Upgrade
Upgrade boost to a version that resolves this vulnerability.
Fixed in 1_80_0
Upgrade
Upgrade curl to a version that resolves this vulnerability.
Fixed in 8.0.1
Upgrade
Upgrade icu4c to a version that resolves this vulnerability.
Fixed in 72_1
Upgrade
Upgrade icu4c-data to a version that resolves this vulnerability.
Fixed in 72_1
Upgrade
Upgrade pdfium to a version that resolves this vulnerability.
Fixed in 5408
Upgrade
Upgrade poppler to a version that resolves this vulnerability.
Fixed in 22.12.0
Upgrade
Upgrade poppler-data to a version that resolves this vulnerability.
Fixed in 0.4.11
Upgrade
Upgrade skia to a version that resolves this vulnerability.
Fixed in m103-b301ff025004c9cd82816c86c547588e6c24b466
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-OpenStack-Cloud-9-2024-75=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-OpenStack-Cloud-Crowbar-9-2024-75=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-75=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-75=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-WE-12-SP5-2024-75=1
Configuration
Use the --enable-openssl3-engines configure flag to re-enable OpenSSL engines.
OpenSSL 3 --enable-openssl3-engines = enabled
Configuration
Pass --disable-md5 to configure.
XMLSec --disable-md5 = enabled

Event History

Jan 10, 2024

Advisory Published

via SUSE·12:30 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which security issues are addressed by this update?

The update fixes CVE-2023-0950, a stack underflow in ScInterpreter, and CVE-2023-2255, which allowed remote documents to be loaded through an IFrame without a prompt.

What LibreOffice version does the update provide?

It updates LibreOffice from version 7.3.6.2 to version 7.5.4.1.

SUSE-SU-2024:0075-1: Security update for LibreOffice

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which security issues are addressed by this update?

What LibreOffice version does the update provide?

Company

Resources

Contact

Frequently Asked Questions

Which security issues are addressed by this update?

What LibreOffice version does the update provide?